I've been happy with my TP-Link Archer VR900, but mainly got that for the combo upgrade to VDSL and 802.11ac. Port forwarding is there (listed as Virtual Servers) as is dual-stack.
If you already have dedicated Wi-Fi provision and multiple switches anyway, I'm guessing you aren't necessarily bound to having a one-box solution.
In that case I would go the whole hog and get a separate VDSL modem (e.g. Draytek 130) so that you can pair with any ethernet router as technology evolves.
I would suggest Ubiquiti ER-X or ER-X-SFP for future options), it's plenty fast enough for 100s of devices and if you ever need the more advanced firewall / routing features they are there (EdgeOS aka customised Vyos formerly known as Vyatta Core).
prlzx on iDNET: VDSL / 21CN at ~40Mbps / 10Mbps
with IP4/6 (no v6? - not true Internet)